Diamond

Onmove

Hi again. I repeated the steps to flash the ROM and this time the phone switched on normally after.

However, as explained in the previous post I am flashing the ROM because the anti malware Dr. Web found the a backdoor on the system folder from were it cannot remove the threat. In details the threat found is: "Android.BackDoor.319" and it reside on /system/priv-app/Settings/oat/arm64/Settings.odex

So, once I successfully flashed the ROM with V7.0 20170506 (that is the same I had originally), switched on the phone, put the wifi, installed "NoRoot Firewall" (to only allow needed connection to the web), installed Dr. Web and performed the "Full scan" and it will still find the "Android.BackDoor.319"  on /system/priv-app/Settings/oat/arm64/Settings.odex

I repeated all the above multiple times but Dr. Web always detect the same backdoor.319

As upon flashing the ROM the only application installed were "NoRoot Firewall" and "Dr. Web" which I doubt they installed the backdoor, I think that the backdoor is already present on your ROM.

I am really looking forward to your reply.  

bencebacsi

Onmove replied at 2017-8-24 18:07
Hi again. I repeated the steps to flash the ROM and this time the phone switched on normally after.  ...

Hi,
Here's a scan on www.virustotal.com



Only DrWeb ''things'' that, it's infected, so it's just a false alarm.

Onmove

It may simply dimostrate that Dr.Web has been smarter than the others just finding something that the other antimalware haven`t added into their library yet.

What I just discovered of UMI Diamond being full of malware into the firmware sine the first version was already well known and reported from other unfortunate customers, following are some examples which I am pretty sure you know already without providing a solution:
http://community.umidigi.com/thread-6468-1-1.html
http://community.umidigi.com/thread-6116-1-1.html

Why instead of blaming Dr.Web, Umi doesn´t get in touch with them to fix it if Dr.Web is wrong or otherwise why UMI doesn't provide a new ROM version which is fine also fro Dr.Web? I think either of them should be on the interest of UMI.

Meanwhile, the only solution I found is to use a customized ROM which seems to be malware free: http://community.umidigi.com/thread-6536-1-1.html

Hope we all can get soon a nice update from UMI   

Onmove

Hello again,

any idea when a new fresh and cleaned firmware will be made available?

I am really looking forward for a solution to this issue.

Regards

mikelowthe

Onmove replied at 2017-8-29 18:56
Hello again,

any idea when a new fresh and cleaned firmware will be made available?

Does this version work, without all the annoying adds that pop up and apps that install themselves, currently using a version 5 of this ROM, that has all these issues?

kulverst

mikelowthe replied at 2017-9-16 21:43
Does this version work, without all the annoying adds that pop up and apps that install themselves ...

Sorry to say, but this version is even worse than previous - it fills up the phone with full screen ads after approximately 3 weeks. And UMI keeps tell us that there is no malware on the ROM.

Viicen

kulverst replied at 2018-1-6 04:09
**** Author was banned or deleted ****

I find myself in the same situation the install and pass  a couple of weeks advertising and install unwanted programs. Any solution?

vicen

Umi diamond has new updates ?, the last one had an infection yet.